I want to thank everyone who responded so
quickly to my post! Following the advice of several of you I was able to
get a small logfile (seconds after I restarted the logging) and found that I’m
being hammered by a dictionary attack coming from 89.138.31.75. I’m
looking to block the IP address right now. Thanks again everyone! Wolf From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John
T (Lists) 1. You are probably experiencing
Dictionary attacks which could account for sudden jump in log files. 2. Your server may be hijacked and is
relaying spam. 3. Possible that one or more computers (man
would I like to say users, he he) is infected with a virus and is sending out
large amounts of emails. 4. It could that logging started working
right. Log file of 4 MB is extremely small. Of course, you have not stated how much
email passes through your server so these are only guesses. Many of us disable the Imail syslog
service and use a full fledged syslog such as Kiwi which allows for a lot of
flexibility including where to log to file. John T eServices For You "Seek, and ye shall
find!" -----Original Message----- I apologize if this is OT; but this is the best support
group I know of for emergency situations, and I have one. Starting one
week ago today (slept 13th), my iMail Sysxxx.txt log files began to
grow out of control. Files, that for several years have averaged around
4Mb in size, suddenly jumped to about 1.5 Gig per day and have remained
there. I found out about this when my server reported running out of
Volume space on the log file partition (which has 15Gig assigned to it) this
morning! These files are so large that I can’t even open them! Nothing has changed on the server that I am aware of.
Has anyone seen this behavior before or have any suggestion? Thanks in advance for any help anyone might be able to
provide. Wolf --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. |
- [Declude.JunkMail] iMail Sys Log... Wolf Tombe
- RE: [Declude.JunkMail] iMai... Michael Jaworski
- Re: [Declude.JunkMail] iMai... Glenn \\ WCNet
- Re: [Declude.JunkMail] iMai... Matt
- RE: [Declude.JunkMail] iMai... Panda Consulting S.A. Luis Alberto Arango
- RE: [Declude.JunkMail] IMai... John T \(Lists\)
- RE: [Declude.JunkMail] ... Wolf Tombe
- Re: [Declude.JunkMa... Dave Doherty
- RE: [Declude.Ju... Wolf Tombe